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Appendix 

This Appendix forms an integral part of the specification. 
XML DTD for SLS 

<?xml version- '1.0" encoding="UTF-8"?> 

<!-- A DTD (Document Type Definition) for the Session Layer Security Protocol (SLS).- 

<!DOCTYPE SLS [ 
<!-- XML SLS DTD --> 

<!ENTITY % uint8 "#PCDATA" > 

<!-- Where the PCDATA is an 8-bit unsigned integer. — > 

<! ENTITY % uint32 "#PCDATA" > 

<!-- Where the PCDATA is an 32-bit unsigned integer. --> 

<! ENTITY % Address "#PCDATA" > 

<!ENTITY String "#PCDATA" > 

<!ELEMENT Opaque (#PCDATA) > 
<!ATTLIST Opaque 

encoding CDATA "urn:ietf-org:base64" > 

<!ELEMENT % Object (#PCDATA) > 
<!ATTLIST Object 

encoding CDATA #IMPLIED > 

<!ELEMENT % ADR (#PCDATA) > 

<!-- Where the PCDATA conforms to the ADR syntax. --> 

<! ATTLIST ADR 

entity CDATA #1MPLIED > 
<!-- Can use the entity to indicate which ADR syntax we want. — > 
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<!ELEMENT % ADRList (#PCDATA) > 

<!-- Where the PCDATA conforms to the ADR syntax for a list. -> 
<!ATTLIST ADR 

entity CD ATA #IMPLIED > 
<!-- Can use the entity to indicate which ADR syntax we want. — > 

<!ENTITY % MessageType " ALERT | HANDSHAKE | APPLICATION_MESSAGE | 
TUNNEL" > 

<!ENTITY % EncodingType " SECURE_DATA | PROTECTED_DATA | CLEAR_DATA " 

> 

<! ELEMENT versionMajor (%uint8;) > 

<! ELEMENT versionMinor (%uint8;) > 

<!ELEMENT spi (%uint32;) > 

<!ELEMENT serial (%uint32;) > 

<! ELEMENT inReplyTo (%uint32;) > 

<! ELEMENT messageType (%MessageType;) > 

<! ELEMENT encodingType (%EncodingType;) > 

<! ELEMENT toAddress (%Address;) > 

<!ELEMENT fromAddress (%Address;) > 

<! ENTITY % PDUdata " SecureData | ProtectedData | ClearData " > 

<!ELEMENT PDU ( 
versionMajor, 
versionMinor, 
spi, 
serial, 

inReplyTo?, 
messageType, 
encodingType, 
toAddress, 



fromAddress, 
%PDUdata;)> 
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< [ELEMENT SecureData ( Opaque ) > 

5 

<!ELEMENT ProtectedData ( mac, data ) > 

< [ELEMENT mac ( Opaque ) > 

<! ELEMENT ClearData (Alert | %Handshake; | ApplicationMessage | PDU) > 

10 

<! ELEMENT Alert ( level, code, detail? ) > 
<! ELEMENT level ( %AlertLevel; ) > 
<! ELEMENT code ( %AlertCode; )> 
<!ELEMENT detail ( %String; ) > 

15 

<!ENTITY % AlertLevel " FATAL | WARNING | DEBUG " > 

<! ENTITY % AlertCode " 
CLOSENOTIFY 
20 | UNEXPECTED_MES SAGE 
| BAD_SPI 
| BAD SERIAL 
| BAD MAC 

| HAND SHAKE F AILURE 
25 | BADCERTIFICATE 

| UNSUPPORTEDCERTIFICATE 

| CERTIFICATE REVOKED 

| CERTIFICATE_VERIFICATION_F AILED 

| ILLEGAL_PARAMETER 
30 | BAD_PROTOCOL_VERSION 

| INSUFFICIENT_SECURITY 

| NORENEGOTIATION 



I ERROR 

" > 
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<!ENTiTY % Handshake " HandshakeRequest 
| HandshakeStart 
| HandshakeReply 
| HandshakeFinish 
" > 

<! ELEMENT HandshakeStart ( 
versionMajor, 
versionMinor, 
spi, 
group, 
keyData, 
cipherSuiteList, 
tags?, 
query? ) > 

<!ELEMENT group (%ADR;) > 

<! ELEMENT keyData (%ADR;) > 

<! ELEMENT cipherSuiteList (%ADRList;)> 

<! ELEMENT tags (%ADRList;) > 

<! ELEMENT query (%ADR;) > 

<!ELEMENT HandshakeReply ( 
versionMajor, 
versionMinor, 
spi, 
spiB, 
keyData, 
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cipherSuite, 
proof?, 
response?, 
tags?, 
5 relay?, 

forwardAddress?, 
signature )> 

<! ELEMENT spiB (%uint32;)> 
10 <! ELEMENT cipherSuite (%ADR;)> 
<! ELEMENT proof (%ADR;)> 
<!ELEMENT response (%ADR;)> 
<! ELEMENT relay (%boolean;)> 
<! ELEMENT forwardAddress (%Address;)> 
1 5 <!ELEMENT signature (% ADR;)> 

<! ENTITY % boolean " FALSE | TRUE " > 

<! ELEMENT HandshakeFinish ( 
20 spi, 

proof?, 
signature)> 

<!ELEMENT ApplicationMessage ANY> 

25 

<! ELEMENT MessageForResource ( 
versionMajor, 
versionMinor, 
primaryResource, 
30 secondaryResources?, 
tags?, 

handlerlnfo?, 



payloadType, 
payload? )> 
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<! ELEMENT primaryResource (ResourceReference)> 
5 <! ELEMENT secondaryResources(ResourceReference*)> 
<! ELEMENT handlerlnfo (ResourceInfo*)> 
<!ELEMENT payloadType (%PayloadType;)> 

<! ELEMENT ResourceReference (#PCDATA) > 
10 <! ELEMENT Resourcelnfo (#PCDATA) > 

<! ENTITY PayloadType " 
METHODCALL 
| METHOD RESULT 
15 | EXCEPTION 
| EVENT 
"> 

<!ELEMENT payload (MethodCall | Object )> 

20 

<!ELEMENT MethodCall ( 
interfaceName, 
methodName, 
args 
25 )> 

<!ELEMENT interfaceName (%String;)> 
<! ELEMENT methodName (%String;)> 
<!ELEMENT args (Object*)> 

30 

]> 



